https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 23:53:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-123615 <p>imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader&#39;s BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer. Unauthenticated remote attackers can supply a crafted ICO image to corrupt adjacent heap chunk metadata, triggering a glibc abort that crashes the worker.</p> <p>imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader&#39;s BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer. Unauthenticated remote attackers can supply a crafted ICO image to corrupt adjacent heap chunk metadata, triggering a glibc abort that crashes the worker.</p> https://db.gcve.eu/vuln/fkie_cve-2026-123615 https://db.gcve.eu/vuln/ghsa-c4x5-qr47-7gw4 <p>imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader&#39;s BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer. Unauthenticated remote attackers can supply a crafted ICO image to corrupt adjacent heap chunk metadata, triggering a glibc abort that crashes the worker.</p> <p>imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader&#39;s BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer. Unauthenticated remote attackers can supply a crafted ICO image to corrupt adjacent heap chunk metadata, triggering a glibc abort that crashes the worker.</p> https://db.gcve.eu/vuln/ghsa-c4x5-qr47-7gw4